From 7442787f03db4dacda8fbf5acde111d3a416056e Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Fri, 26 Feb 2016 21:29:05 -0600
Subject: [PATCH] Fix leak in check_aliases()

---
 kadmin/server.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/kadmin/server.c b/kadmin/server.c
index 89edddd4f..823769796 100644
--- a/kadmin/server.c
+++ b/kadmin/server.c
@@ -684,14 +684,17 @@ check_aliases(kadm5_server_context *contextp,
                 break;
             if (!krb5_principal_compare(contextp->context, new_name, old_name))
                 continue;
+            free_HDB_Ext_Aliases(&iter_del.aliases);
             match = 1;
             break;
         }
         if (match)
             continue;
         ret = _kadm5_acl_check_permission(contextp, KADM5_PRIV_ADD, new_name);
-        if (ret)
+        if (ret) {
+            free_HDB_Ext_Aliases(&iter.aliases);
             return ret;
+        }
     }
 
     return 0;